Self-Hosted VM Runner
The real VM apply gate uses a self-hosted macOS runner because GitHub hosted macOS runners do not reliably boot nested Lima VMs.
Security Rule
Section titled “Security Rule”Do not install the VM runner as a macOS service.
Keep the runner offline by default. Start it manually only when you intentionally want to run the VM apply gate.
The runner must have the hostshift-vm label:
runs-on: [self-hosted, macOS, hostshift-vm]Start The Runner
Section titled “Start The Runner”cd ~/actions-runner-hostshift./run.shStop it with Ctrl-C after the workflow finishes.
Do not run:
sudo ./svc.sh installsudo ./svc.sh startRun The Gate
Section titled “Run The Gate”Use the VM E2E Apply workflow, or the CI workflow with run_vm_apply checked.